+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, Blocking ports like french fishermen in Technical; ...
  1. #1
    SSFC's Avatar
    Join Date
    Nov 2007
    Location
    Stockton
    Posts
    52
    Thank Post
    30
    Thanked 7 Times in 6 Posts
    Rep Power
    16

    Blocking ports like french fishermen

    We have recently implemented a network access solution so that students can access the wireless network and get filtered internet access. Currently we use Inty as our filter and firewall.

    Before we give the students the information to access this we want to make sure they canít use up bandwidth playing multiplayer games (e.g. call of duty) or worse use the college internet connection to download copyrighted material.

    Ideally we would like to block all ports except for those needed (e.g.: 80, 25, etc)

    Has anyone implemented a similar blocking policy? If so what ports have you white listed?

    P.S The way our network is set up the policy would have to be college wide itís not possible to isolate the wireless devices and apply a different policy.

  2. #2


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,658
    Thank Post
    276
    Thanked 780 Times in 607 Posts
    Rep Power
    224
    Just a thought - wouldn't it be better to block 25 site-wide and then have a whitelist allow only for your mailservers/relays?

    Same with 80/443/21 and an in-house proxy server?

    Or can you not use rules on a per-ip/vlan level at all?

  3. Thanks to pete from:

    SSFC (30th April 2009)

  4. #3

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,136
    Thank Post
    1,913
    Thanked 1,345 Times in 743 Posts
    Blog Entries
    3
    Rep Power
    395
    D'oh and here was me reading the title of this thread and thinking we we're all going to go around agitating and smoking gitanes and muttering sacre bleu!

  5. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,479
    Thank Post
    867
    Thanked 852 Times in 673 Posts
    Rep Power
    197
    We run with no ports open here for "general population" - all outbound access is proxied. This is a good way to start. I would always suggest you spend an hour or two on implications if you are opening a port out, and probably sleep on it if someone asks for a port in!

  6. Thanks to tom_newton from:

    SSFC (30th April 2009)

  7. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,103
    Thank Post
    891
    Thanked 1,751 Times in 1,510 Posts
    Blog Entries
    12
    Rep Power
    457
    One problem i could see is a website that might use other ports than 80 or 443

  8. #6

    Join Date
    May 2009
    Location
    Sheffield
    Posts
    258
    Thank Post
    23
    Thanked 38 Times in 29 Posts
    Rep Power
    20
    Definitely proxy only in my book. It might be worth considering getting a content filter too, as it's very easy to access sites using google/wayback machine cache...

  9. #7

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,646
    Thank Post
    932
    Thanked 1,342 Times in 820 Posts
    Blog Entries
    1
    Rep Power
    449
    Quote Originally Posted by FN-GM View Post
    One problem i could see is a website that might use other ports than 80 or 443
    Yeh but there really are not many that do that. You only have 8080/80 and 443 to worry about as without the server being on 80 the url wont work without a port specified.
    For the odd sites you can always make a rule if possible saying if xsite.com allow port 90 etc.
    BTW love the title lol

SHARE:
+ Post New Thread

Similar Threads

  1. [Website] Even the French do embarrasing things!
    By laserblazer in forum Jokes/Interweb Things
    Replies: 1
    Last Post: 28th October 2008, 09:45 AM
  2. Replies: 5
    Last Post: 22nd June 2007, 09:04 PM
  3. MFL Software Vektor - French Foundations
    By wesleyw in forum Educational Software
    Replies: 0
    Last Post: 10th August 2006, 09:30 AM
  4. Replies: 10
    Last Post: 24th March 2006, 09:48 AM
  5. Playing French Videos
    By cinewlyn in forum Hardware
    Replies: 9
    Last Post: 19th December 2005, 05:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •